Account Security Recommendations

Steam Friends

• Anyone can attempt to add you - Users can add you to their Friends list by observing your in-game nickname, or if they know your account's contact e-mail address - for this reason we recommend that you keep in mind that the users who have added you may not be people you have spoken with before. Users can change their Friends nicknames at any time.
• Account Phishing - Attempting to trick other users into providing password information is commonly called "phishing" - unfortunately, some individuals are using deliberately-deceptive Friends nicknames to request password information from other users. Steam Support does not use the Friends network to contact users, nor will we request CD Key information or credit card purchase information unless you have contacted us for assistance or the information is being sent to steamsupport@support.steampowered.com

Things to Watch Out For

Account hijackers have several common methods of attack, most of which rely upon misinformation or deception. Your account cannot be stolen if you follow these recommendations and refrain from sharing your account.

Watch out for these activities:

• Requests for login and password information

  Deny requests for login and password information from other users. Do not share your account login information with anyone. No reputable gaming clan will ask for your login information to join. Game server administrators do not need your Steam account information.

• Unsolicited messages from "Steam Support" (Phishing Scams)

  Ignore unsolicited messages from "Steam Support" unless the message originates from the support.steampowered.com domain.

• Malicious programs in downloads

  It is common for executable (.EXE) files, dynamic link libraries (.DLL files), and batch (.BAT) files being offered as parts of "mods" to contain malicious software designed to steal Steam account login information. Hacks are another very common source of malicious programs.

• Examples of hijacking attempts

  A list of recent scams is maintained on the Steampowered.com forums in the Hijacking Alerts thread.

General Security Recommendations

In addition to selecting a strong password, it is a good idea to maintain the security of your system in the following ways:

• Select a Strong Password

  A strong password is a necessary first step toward ensuring the security of your account. Your password should meet all of the minimum requirements listed below:

  • Use at least 6 characters
  • Use a combination of uppercase and lowercase letters.
  • Include at least one number within the password
  • Do not use a name, a word that could be found in the dictionary, or a series of letters as it appears on the keyboard ("qwerty" and "12345" are not secure passwords)
• Use unique passwords

  Make sure you are using a different password for your Steam account, your Steam Support account, and your contact e-mail address.

  If you participate in any gaming forums, make sure that your username and password on the forum site is different from your Steam username and password.

• Scan your computer

  Regularly scan your computer for viruses, key loggers, spyware, and other malicious code with a virus scan utility that has the most recent virus definitions.

• Avoid insecure computers

  Avoid accessing your Steam Account from internet cafes or shared computers - if you must use an internet cafe or shared computer, make sure it has been scanned for viruses, trojans, and keyloggers.

• Always log out of your account on shared machines

  If the machine you use to access Steam has multiple users, be sure to exit and log out of Steam when you are done using the machine (if the "Remember Password" option is checked or if Steam is minimized to the System Tray but not fully closed another user may be able to access your account).

Related Articles

Contacting VALVe Billing and Support

Reclaiming a Hijacked Steam Account

Error verifying STEAM UserID ticket